This document describes how R.R.T Technologies Ltd. (hereinafter: "the Company", "we") collects, uses, shares, stores, and protects personal information in the context of the website, CRM system, and related services (hereinafter: "the Service"). This policy supplements the terms of use and its appendices and forms part of them.
Regarding personal information of the client's end customers that is entered/retrieved/processed within the service – we act as a "Data Processor" for your client, and the DPA between us is the binding document. This policy primarily regulates the processing of information in which we are the "Data Controller": website visitors, registrants, administrative users, billing accounts, and the like.
Who We Are and How to Contact Us
- R.R.T Technologies Ltd., Company ID 516588266.
- Address: Oppenheimer 2, Science Park, Rehovot, Postal Code: 7670102
- Email for privacy/security inquiries: support@financi.co.il
Scope and Terms
- This policy applies to (a) visitors to our website; (b) administrative users/business contacts at our clients; (c) prospects who made marketing contact; (d) support inquiries; (e) operational information required to operate the service.
- "Client Data" – information about the client's end customers that is processed in the system on behalf of the client – is regulated by the DPA.
Categories of Information We Process as Controller
May vary by usage, the categories:
- Account/engagement details: name, email, phone, role, organization, billing details and invoices.
- Usage and operational data: system logs, IP address, device/browser identifiers, timestamps, error events, clicks and configurations.
- Communication: support inquiry content, support call documentation, recordings (if approved), email correspondence.
- Marketing and distribution: mailing preferences, opens/clicks (our operational emails only).
- Cookies and tracking: essential Cookies for operation; analytics/measurement with consent.
Information We Process as Processor (Data Processor)
Client data that the client uploads/synchronizes/retrieves from external sources (Pension Clearing House, Insurance Authority, financial information service, CSV/XLSX import, telephony, email, etc.) – is processed solely according to the client's instructions and the DPA. Your client is the "Data Controller" with respect to end customers.
Sources of Collection
- Information you provided to us directly (registration, purchase, support).
- Information collected automatically through the service (logs, telemetry, necessary cookies).
- Public/professional business information (e.g., business social network profile provided knowingly).
- Data received from third parties under the client's subscription (when we process for them according to DPA).
Processing Purposes and Legal Bases
We process information for the following (bases according to Israeli law, as applicable):
- Service operation and contract performance: account creation, pricing/billing, support, operational communication.
- Legitimate interest: security, fraud prevention, user experience optimization, aggregate analytics, product improvement.
- Legal compliance: record keeping, response to authorized authorities, tax obligations.
- Consent: non-essential Cookies, our marketing communications to your users (Opt-in and clear Opt-out).
Information Sharing
We share information to the minimum extent necessary with:
- Infrastructure providers and sub-processors: cloud, email/SMS/telephony, monitoring, analytics. All under processing agreements and adequate security (detailed list – in sub-processor appendix).
- Partners/professional advisors: legal/accounting under confidentiality obligations.
- Authorities: if there is a legal obligation or judicial order.
- We do not sell personal information.
International Transfers
Hosting/processing may be performed in Israel and/or outside Israel.
Information Security
We implement reasonable technical and organizational security measures: encryption in transit and at rest, MFA, RBAC, logs, hardening, daily backups, incident response plan. Notification of security incidents – as soon as possible and without unreasonable delay, and no later than 72 hours, as detailed in the DPA.
Data Retention
We will retain profile/billing/support information for periods necessary for the purposes for which it was collected, compliance with legal obligations and legal protection, and thereafter delete/anonymize. Client data as processor – according to the DPA (export 30 days certain; deletion from production environments thereafter; backups according to deletion cycles).
Cookies and Similar Technologies
- We will use essential Cookies for system operation (Session, security, preferences).
- Analytics/marketing cookies – only with consent, and can be canceled at any time through the preferences center.
- Browsers allow control/deletion of cookies; experience may be affected when canceled.
Marketing Communications
We will send you update/product/opportunity content only with consent or according to prior contact permitted by law, and with removal option in every message. Operational/contractual messages are not marketing.
Data Subject Rights
In Israel – right of access and correction (subject to exceptions). To exercise rights: contact us at support@financi.co.il.
Minors
The service is not directed to minors. We do not intend to knowingly collect information from minors. If we become aware of such collection – we will act to delete it.
Integrations and External Sources on Behalf of Client
When the client activates connections to the Pension Clearing House, Insurance Authority, financial information service, telephony/email providers, and/or uploads CSV/XLSX files:
- The client is responsible for the legal basis, verified consents, management of permissions/refresh/cancellation and data accuracy.
- We will process such information solely according to the client's instructions and within the DPA framework.
- Availability/currency/completeness of information from these sources is not under our control.
Policy Changes
We will update this policy from time to time. Material updates will take effect 30 days from the notice date (or earlier if required for compliance/security), and will be published on this page and/or as a notice in the system.
Contact
For questions, rights requests or complaints regarding privacy: support@financi.co.il.
Connected Social Media Accounts
We connect the Company's own brand accounts to the service – Facebook Pages, Instagram professional accounts, Threads, TikTok, X and LinkedIn Pages – in order to publish posts, measure performance and answer comments and messages. We only connect accounts that the Company owns or administers, after an authorised person has logged in through the platform itself and granted the permissions. Depending on the permissions granted, we may access and store:
Comment and message text from LinkedIn is kept for up to 48 hours, and author identifiers for up to 24 hours, as the platform requires. From the other networks, data is kept only as long as it is needed to handle and answer the message, and is deleted on request. We use this data only to publish, measure and reply. We do not sell it, we do not use it to build advertising profiles, and we do not use it to train AI models.
Anyone may ask us to delete their data, whether a comment or message that reached a Financi account or an account connection to the service. You can also revoke Financi's access in the platform's own settings. Full instructions are on the Data Deletion page.